gittuf - a signed log for git refs
https://nesbitt.io/2026/06/04/gittuf-a-signed-log-for-git-refs.html
@nprofile1q... so gittuf treats a github repo's refs like a resource in an authority-less P2P network?